US11115418B2 - Registration and authorization method device and system - Google Patents

Registration and authorization method device and system Download PDF

Info

Publication number
US11115418B2
US11115418B2 US16/315,391 US201616315391A US11115418B2 US 11115418 B2 US11115418 B2 US 11115418B2 US 201616315391 A US201616315391 A US 201616315391A US 11115418 B2 US11115418 B2 US 11115418B2
Authority
US
United States
Prior art keywords
user
information
authorization
identification information
blockchain
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active, expires
Application number
US16/315,391
Other versions
US20190312877A1 (en
Inventor
Hui Xie
Jian Wang
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Cloudminds Robotics Co Ltd
Cloudminds Shanghai Robotics Co Ltd
Original Assignee
Cloudminds Shanghai Robotics Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Cloudminds Shanghai Robotics Co Ltd filed Critical Cloudminds Shanghai Robotics Co Ltd
Publication of US20190312877A1 publication Critical patent/US20190312877A1/en
Assigned to CLOUDMINDS (SHENZHEN) ROBOTICS SYSTEMS CO., LTD. reassignment CLOUDMINDS (SHENZHEN) ROBOTICS SYSTEMS CO., LTD. ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: XIE, HUI, WANG, JIAN
Assigned to CLOUDMINDS (SHANGHAI) ROBOTICS CO., LTD. reassignment CLOUDMINDS (SHANGHAI) ROBOTICS CO., LTD. ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: CLOUDMINDS (SHENZHEN) ROBOTICS SYSTEMS CO., LTD.
Application granted granted Critical
Publication of US11115418B2 publication Critical patent/US11115418B2/en
Assigned to CLOUDMINDS ROBOTICS CO., LTD. reassignment CLOUDMINDS ROBOTICS CO., LTD. CORRECTIVE ASSIGNMENT TO CORRECT THE ASSIGNEE NAME PREVIOUSLY RECORDED AT REEL: 055472 FRAME: 0068. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT . Assignors: CLOUDMINDS (SHENZHEN) ROBOTICS SYSTEMS CO., LTD.
Assigned to CLOUDMINDS ROBOTICS CO., LTD. reassignment CLOUDMINDS ROBOTICS CO., LTD. CHANGE OF ADDRESS Assignors: CLOUDMINDS ROBOTICS CO., LTD.
Active legal-status Critical Current
Adjusted expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/102—Entity profiles
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/50—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using hash chains, e.g. blockchains or hash trees
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/12—Applying verification of the received information
    • H04L63/126—Applying verification of the received information the source of the received data
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3236—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3236—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
    • H04L9/3239—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
    • H04L2209/38—

Definitions

  • the present disclosure relates to the field of network communications, in particular to a registration and authorization method, device and system.
  • Authorization is the process of verifying the identity of a user and determining which services the user may use after the verification is passed.
  • the existing authorization technology generally requires the participation of a trusted third party.
  • the working process is as follows: a user logs in an access gateway and provides a password or a certificate, etc. as user identification, and the access gateway transfers the user identification to an authorization server. After the authorization server verifies the user identity, a verification success message and a service that the user can access or a verification failure message are/is returned to the access gateway according to the verification result. If the verification is passed, the access gateway allows the user to access the corresponding accessible service.
  • the present disclosure aims at providing a registration and authorization method, device and system for solving the technical problem of relatively low safety of the existing authorization technology.
  • a first aspect of the present invention provides a registration method, the method is applied to an authorization server which is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, each block is used for storing authorization information, and the method includes:
  • the registration request message includes identification information, and the identification information is used for performing identity verification on a user;
  • the authorization information is used to indicate a service that the user can access
  • a second aspect of the present invention provides an authorization method, the method is applied to an access server which is a node in a blockchain network, and the method includes:
  • a third aspect of the present invention provides a registration device, the registration device is applied to an authorization server which is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, each block is used for storing authorization information, and the registration device comprises:
  • a message receiving unit for receiving a registration request message sent by a user device, wherein the registration request message includes identification information, and the identification information is used for performing identity verification on a user;
  • an authority assigning unit for assigning authorization information to the user, wherein the authorization information is used to indicate a service that the user can access;
  • a blockchain writing unit for writing the identification information and the authorization information into the blocks of the blockchain through the authorization server.
  • a fourth aspect of the present invention provides an authorization device, the authorization device is used for an access server which is a node in a blockchain network, and the authorization device comprises:
  • a message receiving unit for receiving an access request message sent by a user device, wherein the access request message includes user identity information
  • a blockchain inquiring unit for inquiring identification information and authorization information of the user in a blockchain according to the user identity information through the access server;
  • an identity verification unit for performing identity verification on the user according to the identification information
  • an access authorizing unit for allowing the user to access the designated service according to the authorization information after the verification of the user by the identity verification unit is passed.
  • a fifth aspect of the present invention provides an authorization server which is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, each block is used for storing authorization information, and the authorization server comprises:
  • processor a communication interface, a memory and a communication bus; the processor, the communication interface and the memory communicate with each other through the communication bus;
  • the memory is used for storing application programs
  • the processor is used for performing the application program to implement the method of the first aspect.
  • a sixth aspect of the present invention provides an access server, the access server is a node in a blockchain network, and the access server comprises:
  • processor a communication interface, a memory and a communication bus; the processor, the communication interface and the memory communicate with each other through the communication bus;
  • the memory is used for storing application programs
  • the processor is used for performing the application program to implement the method of the second aspect.
  • a seventh aspect of the present invention provides an authorization system, and the system comprises:
  • an authorization server and an access server wherein the authorization server is a node in a blockchain network, the access server is a node in the blockchain network, and the access server is connected with a server providing network service;
  • the authorization server is used for performing the method of the first aspect
  • the access server is used for performing the method of the second aspect.
  • a ninth aspect of the present invention provides a computer readable storage medium, the computer readable medium is used for storing a computer program, wherein the computer program comprises instructions for performing the method of the first aspect.
  • a tenth aspect of the present invention provides a computer readable storage medium, the computer readable medium is used for storing a computer program, wherein the computer program comprises instructions for performing the method of the second aspect.
  • the authorization server writes the identity information and the authorization information of the user into the blockchain.
  • the identification information stored in the blockchain may be used to perform the identity verification, and after the verification is passed, the user is allowed to access the designated service according to the authorization information.
  • the detrusting of the blockchain enables the authorization process to require no endorsement by a trusted third party.
  • the decentralization of the blockchain makes it impossible for any individual or entity to tamper with the relevant information of the user, thus ensuring the safety and reliability of the authorization.
  • FIG. 1 is a schematic flowchart of a registration method provided by an embodiment of the present invention
  • FIG. 2 is a schematic flowchart of an authorization method provided by an embodiment of the present invention.
  • FIG. 3 is a schematic flowchart of a registration and authorization method provided by an embodiment of the present invention.
  • FIG. 4 is a schematic structural diagram of a registration device provided by an embodiment of the present invention.
  • FIG. 5 is a schematic structural diagram of an authorization device provided by an embodiment of the present invention.
  • FIG. 6 is a schematic structural diagram of another authorization server provided by an embodiment of the present invention.
  • FIG. 7 is a schematic structural diagram of another access server provided by an embodiment of the present invention.
  • FIG. 8 is a schematic structural diagram of an authorization system provided by an embodiment of the present invention.
  • a blockchain is a decentralized distributed database system in which all nodes in a blockchain network participate in maintenance. It is composed of a series of data blocks generated on the basis of cryptography, and each data block is a block in the blockchain. According to the sequence of generation time, the blocks are linked together orderly to form a data chain, which is vividly called the blockchain.
  • the blockchain generates and verifies the protocol by the special blocks and transactions and has the safety features of unchangeability, unforgeability and full traceability.
  • User identity the user identity in a blockchain is represented by a public key, a private key corresponding to the public key is mastered by the user and not issued to a network, the public key becomes an “address” after specific hashing and encoding, and the “address” represents the user and can be issued at will.
  • Blockchain data writing the node of the blockchain writes data to the blockchain by issuing a transaction to the blockchain network.
  • the transaction contains a signature of the transaction by the user with his or her private key to verify the identity of the user.
  • the transaction is recorded into a produced new block by a “miner” (a blockchain node performing a consensus competition mechanism of the blockchain) and then issued to the blockchain network, and after the transaction is verified and accepted by other blockchain nodes, transaction data is written into the blockchain.
  • miner a blockchain node performing a consensus competition mechanism of the blockchain
  • the blockchain has the following features:
  • Decentralization the entire blockchain system has no centralized hardware or management organism. The rights and obligations between any nodes are equal, and the damage or loss of any node will not affect the operation of the entire system. Thus, the blockchain may be considered as having great robustness.
  • De-trusting the data exchange between the nodes participating in the entire blockchain system does not require mutual trust.
  • the operating rules of the entire system are public and transparent, and all data contents are also public, so the nodes cannot defraud other nodes within the rule scope and the time range designated by the system.
  • An embodiment of the present invention provides a registration method based on the blockchain technology, the method is applied to an authorization server, wherein the authorization server is a node in a blockchain network, as shown in FIG. 1 , and the method comprises:
  • the identification information is used for performing identity verification on a user.
  • an authorization server may assign authorization information to the user according to pre-configured authorization rules, so as to control the server that the user can access.
  • the authorization server may design reasonable network access authorities for the users with different identities, different access places, different access ways and different safe states, which are not limited by the present invention.
  • the authorization server is a blockchain node in the blockchain network to ensure that the authorization server at least has the function of participating in blockchain transactions.
  • the authorization server stores the blockchain composed of a plurality of blocks, and each block is used for storing authorization information. It is worth noting that the authorization server may not participate in mining.
  • the authorization server broadcasts the identification information and the authorization information to other nodes in the blockchain network for being written by other nodes when the nodes generate the blocks.
  • the authorization server may also participate in mining.
  • the authorization server may write the identification information and the authorization information into the block when it generates the block to obtain block writing authority, and may also broadcast the identification information and the authorization information to other nodes in the blockchain network for being written by other nodes when the nodes generate the blocks.
  • an access server may utilize the identification information stored in the blockchain to perform the identity verification on access when it receives an access request message sent by the user device, and after the verification is passed, the user is allowed to access the designated service according to the authorization information.
  • the detrusting of the blockchain achieves that the authorization process needs no endorsement by a trusted third party.
  • the decentralization of the blockchain makes it impossible for any individual or entity to tamper with the relevant information of the user, thus ensuring the safety and reliability of the authorization.
  • an embodiment of the present invention also provides an authorization method, the method is applied to an access server, the access server is a node in a blockchain network, as shown in FIG. 2 , and the method comprises:
  • the access server is a blockchain node in the blockchain network to ensure that the access server at least has the function of inquiring the blockchain.
  • the access server and the authorization server in the registration method as shown in FIG. 1 may be the same server.
  • the access server may use the private key to seek any one block in the blockchain to inquire and obtain the identification information and the authorization information of the user. If the access server doesn't find the identification information and the authorization information of the user in the blockchain, an access failure message is returned to the user device.
  • the authorization method provided in the embodiment of the present invention has the advantages that as the blockchain network has no centralized hardware or management organism, the rights and obligations between any nodes are equal, and the damage or loss of any node will not affect the operation of the entire system. Thus, the authorization process is safer and more reliable.
  • the identification information may be a ciphertext of a password hash value.
  • the identification information may be obtained by encrypting a plaintext of the password hash value with a public key of the access server and may also be obtained by encrypting the plaintext of the password hash value with a preset key by adopting a symmetric encryption algorithm, wherein the preset key may be stored and used independently by the authorization server and the access server.
  • the user identity information may include a user name and the password hash value
  • the access server receives the user identity information
  • the ciphertext of the password hash value stored on the blockchain is found by the user name.
  • the plaintext of the password hash value is obtained by decrypting the identification information through its own private key or the preset key, if the plaintext of the password hash value obtained by the decryption is consistent with the password hash value in the user identity information, it is indicated that the user identity verification is passed, and if not, it is indicated that the user identity verification is not passed.
  • the identification information may be a user public key.
  • the user identity information may be the user public key, and after determining that the user public key and the authorization information are recorded in the blockchain according to the user public key, the access server may send instruction information instructing the user to provide identification to the user device, receive signature information of user private key signature sent by the user device according to the instruction information and perform signature verification on the signature information, if the signature verification succeeds, it is indicated that the user identity verification is passed, and if the signature verification fails, it is indicated that the user identity verification fails.
  • the registration method as shown in FIG. 1 also includes that: the authorization server receives an update message, the update message is used for updating the authorization information corresponding to the identification information, and the identification information and the updated authorization information are written into the blocks of the blockchain through the authorization server.
  • the authorization server may change the authorization scope of the user according to the control of the management system.
  • a plurality of blocks storing the identification information and the authorization information of the user may exist in the blockchain.
  • step S 202 if a plurality of blocks storing the identification information and the authorization information of the user are inquired in the blockchain through the access server by utilizing the user identity information, acquiring the identification information and the authorization information of the user from the latest block in the plurality of the blocks to ensure that the access server allows the user to access network services according to the latest authorization information.
  • a user device sends a registration request message to an authorization server, wherein the registration request message includes a user public key.
  • An authorization server assigns authorization information to a user and writes the user public key and the authorization information into a blockchain.
  • a user device sends an access request message to an access server, wherein the access request message includes the user public key.
  • the access server inquires whether the user public key has been written into the blockchain or not in the blockchain according to the user public key.
  • step S 305 is performed; and if it is inquired that the user public key has been written into the blockchain in the blockchain according to the user public key, the step S 306 and the subsequent steps are performed.
  • the access server returns an access denied message to the user device.
  • the access server sends a message for instructing the user to provide identification based on the public key and a private key to the user device.
  • the user device sends signature information of the user private key signature to the access server.
  • the access server performs signature verification on the signature information according to the user public key.
  • step S 305 is performed; and if the signature verification succeeds, the step S 309 is performed.
  • the access server allows the user device to access network services in an authorization range according to the authorization information.
  • the detrusting of the blockchain enables the authorization process to require no endorsement by a trusted third party.
  • the decentralization of the blockchain makes it impossible for any individual or entity to tamper with the relevant information of the user, thus ensuring the safety and reliability of the authorization.
  • the above method is only an example of using the user public key as the identification information, and in specific implementation, the identification information may also be a ciphertext of a password hash value.
  • the method is expressed as a series of action combinations. However, those skilled in the art should understand that the present invention is not limited by the described order of actions. Secondly, those of skill in the art should also understand that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the present invention.
  • An embodiment of the present invention further provides a registration device 40 , the registration device 40 is applied to an authorization server which is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, each block is used for storing authorization information, and the registration device 40 is used for implementing the registration method as shown in FIG. 1 provided in the above method embodiment, and as shown in FIG. 4 , the registration device 40 comprises:
  • a message receiving unit 401 for receiving a registration request message sent by a user device, wherein the registration request message includes identification information, and the identification information is used for performing identity verification on a user;
  • a blockchain writing unit 403 for writing the identification information and the authorization information into the blocks of the blockchain through the authorization server.
  • the authorization server applying the registration device can write the identity information and the authorization information of the user into the blockchain.
  • the identification information stored in the blockchain may be used to perform the identity verification, and after the verification is passed, the user is allowed to access the designated service according to the authorization information.
  • the detrusting of the blockchain achieves that the authorization process needs no endorsement by a trusted third party.
  • the decentralization of the blockchain makes it impossible for any individual or entity to tamper with the relevant information of the user, thus ensuring the safety and reliability of the authorization.
  • the identification information is a ciphertext of a password hash value; or the identification information is a user public key. Specifically, reference may be made to way 1 and way 2 in the above method embodiment, which will not be repeated herein.
  • the message receiving unit 401 is also used for receiving an update message, the update message is used for updating the authorization information corresponding to the identification information; and the blockchain writing unit 403 is also used for writing the identification information and the updated authorization information into the blocks of the blockchain through the authorization server.
  • the authorization server may change the authorization scope of the user according to the control of the management system.
  • a plurality of blocks storing the identification information and the authorization information of the user may exist in the blockchain.
  • the registration device 40 may be implemented by one or more ASICs (Application Specific Integrated Circuits), DSPs (Digital Signal Processors), DSPDs (Digital Signal Processing Devices), PLDs (Programmable Logic Devices), FPGAs (Field Programmable Gate Arrays), controllers, micro-controllers, microprocessors or other electronic elements, so as to perform the method provided by FIG. 1 .
  • ASICs Application Specific Integrated Circuits
  • DSPs Digital Signal Processors
  • DSPDs Digital Signal Processing Devices
  • PLDs Programmable Logic Devices
  • FPGAs Field Programmable Gate Arrays
  • controllers micro-controllers, microprocessors or other electronic elements, so as to perform the method provided by FIG. 1 .
  • An embodiment of the present invention further provides an authorization device 50 , the authorization device 50 is applied to an access server, the access server is a node in a blockchain network, the authorization device 50 is used for implementing the authorization method as shown in FIG. 2 provided by the above method embodiment, and as shown in FIG. 5 , the authorization device 50 comprises:
  • a message receiving unit 501 for receiving an access request message sent by a user device, wherein the access request message includes user identity information
  • a blockchain inquiring unit 502 for inquiring identification information and authorization information of the user in a blockchain according to the user identity information through the access server;
  • an identity verification unit 503 for performing identity verification on the user according to the identification information
  • an access authorizing unit 504 for allowing the user to access the designated service according to the authorization information after the verification of the user by the identity verification unit is passed.
  • the detrusting of the blockchain enables the authorization process to require no endorsement by a trusted third party.
  • the decentralization of the blockchain makes it impossible for any individual or entity to tamper with the relevant information of the user, thus ensuring the safety and reliability of the authorization.
  • the blockchain inquiring unit 502 is used for:
  • the identification information is a ciphertext of a password hash value
  • the user identity information includes a user name and the password hash value.
  • the blockchain inquiring unit 502 is used for: seeking the corresponding ciphertext of the password hash value and the authorization information on the blockchain through the access server by utilizing the user name; and the identity verification unit 503 is used for: decrypting the ciphertext of the password hash value and determining that the verification is passed if a plaintext obtained by decryption is consistent with the password hash value in the user identity information.
  • the identification information is a user public key.
  • the identity verification unit 503 is used for: sending instruction information instructing the user to provide identification to the user device; receiving signature information of user private key signature sent by the user device according to the instruction information; and performing signature verification on the signature information according to the user public key, and if the signature verification succeeds, determining that the identity verification is passed.
  • the access server may be positioned at the boundary of a network which needs to be accessed by the user device, and the network may be Internet or a local area network. After the user device passes verification, the user device can access the network and access all services of the network. The network services may also be provided by a cloud server, and after the user device passes the identity verification, the user device may access the corresponding service in the authorization range.
  • the above division of the modules composing the access server is only one logical function division, and other division ways may also be adopted in actual implementation. Furthermore, the physical implementation of the various units may also adopt a variety of ways, which is not limited by the present invention.
  • An embodiment of the present invention further provides an authorization server 60 , the authorization server 60 is a node in a blockchain network, and as shown in FIG. 6 , the authorization server 60 comprises:
  • processor 601 a processor 601 , a communication interface 602 , a memory 603 and a communication bus 604 ; and the processor 601 , the communication interface 602 and the memory 603 communicate with each other through the communication bus 604 .
  • the processor 601 may be a multi-core central processing unit (CPU) or an ASIC (Application Specific Integrated Circuit) or one or more integrated circuits configured to implement the embodiment of the present invention.
  • CPU central processing unit
  • ASIC Application Specific Integrated Circuit
  • the memory 603 is used for storing program codes, and the program codes include computer operating instructions and a network flow diagram.
  • the memory 603 may carry a high-speed RAM memory and may also include a non-volatile memory, such as at least one magnetic disk storage.
  • the communication interface 602 is used for implementing the connection and communication between these devices.
  • the processor 601 performs the program codes, and the program codes are used for implementing the following method during operation:
  • the registration request message includes identification information, and the identification information is used for performing identity verification on a user;
  • the authorization information is used to indicate a service that the user can access
  • the identification information is a ciphertext of a password hash value; or the identification information is a user public key.
  • the method further comprises:
  • the authorization server writes the identity information and the authorization information of the user into the blockchain.
  • the identification information stored in the blockchain may be used to perform the identity verification, and after the verification is passed, the user is allowed to access the designated service according to the authorization information.
  • the detrusting of the blockchain achieves that the authorization process needs no endorsement by a trusted third party.
  • the decentralization of the blockchain makes it impossible for any individual or entity to tamper with the relevant information of the user, thus ensuring the safety and reliability of the authorization.
  • An embodiment of the present invention further provides an access server 70 , the access server 70 is a node in a blockchain network, and as shown in FIG. 7 , the access server 70 comprises:
  • processor 701 a processor 701 , a communication interface 702 , a memory 703 and a communication bus 704 , wherein the processor 701 , the communication interface 702 and the memory 703 communicate with each other through the communication bus 704 .
  • the processor 701 may be a multi-core central processing unit (CPU) or an ASIC (Application Specific Integrated Circuit) or one or more integrated circuits configured to implement the embodiment of the present invention.
  • CPU central processing unit
  • ASIC Application Specific Integrated Circuit
  • the memory 703 is used for, storing program codes, and the program codes include computer operating instructions and a network flow diagram.
  • the memory 703 may carry a high-speed RAM memory and may also include a non-volatile memory, such as at least one magnetic disk storage.
  • the communication interface 702 is used for implementing the connection and communication between these devices.
  • the processor 701 performs the program codes, and the program codes are used for implementing the following method during operation:
  • inquiring the identification information and the authorization information of the user in the blockchain according to the user identity information comprises:
  • the identification information is a ciphertext of a password hash value
  • the user identity information includes a password
  • performing the identity verification on the user according to the identification information comprises:
  • decrypting the user identity information and determining that the verification is passed if a plaintext obtained by decryption is consistent with the user identity information.
  • the identification information is a user public key
  • performing the identity verification on the user according to the identification information comprises:
  • An embodiment of the present invention further provides an authorization system 80 , the authorization system 80 comprises an authorization server 60 and an access server 70 , wherein the authorization server 60 is a node in a blockchain network, the access server 70 is a node in the blockchain network, and the access server 50 is connected with a server providing network services.
  • the authorization server 60 reference may be made to the description of FIG. 6 , which will not be repeated herein.
  • the access server 70 reference may be made to the description of FIG. 7 , which will not be repeated herein.
  • the disclosed system, device and method may be implemented in other ways.
  • the device embodiments described above are only illustrative.
  • the division of the units is only a logic functional division, and there may be additional division ways in actual implementation.
  • a plurality of units or components may be combined or may be integrated to another system, or some features may be omitted or may not be performed.
  • the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical, mechanical or other forms.
  • the units illustrated as separate parts may or may not be physically separated.
  • the parts displayed as units may or may not be physical units, namely may be positioned at one place, or may be distributed on a plurality of network units.
  • the object of the scheme of the embodiment may be achieved by selecting part or all of the units according to actual needs.
  • the various functional units in the various embodiments of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.
  • the units integrated above may be implemented not only in a hardware form, but also in a form of hardware and software functional units.

Abstract

A registration and authorization method, device and system is used for solving the technical problem of relatively low safety of the existing authorization technology. The method is applied to an authorization server, the authorization server is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, each block is used for storing authorization information, and the method comprises: receiving a registration request message sent by a user device, wherein the registration request message includes identification information, and the identification information is used for performing identity verification on a user; assigning authorization information to the user, wherein the authorization information is used for indicating a service that the user can access; and writing the identification information and the authorization information into the blocks of the blockchain through the authorization server.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS
This application claims the benefit of PCT application No. PCT/CN2016/111857 filed on Dec. 23, 2016 and Chinese publication No. CN107079036A filed on May 12, 2017, the contents of which are incorporated herein by reference.
Field of the Invention
The present disclosure relates to the field of network communications, in particular to a registration and authorization method, device and system.
BACKGROUND OF THE INVENTION
For users in an already registered computer or network system, the services that they can access may be different. Authorization is the process of verifying the identity of a user and determining which services the user may use after the verification is passed.
The existing authorization technology generally requires the participation of a trusted third party. The working process is as follows: a user logs in an access gateway and provides a password or a certificate, etc. as user identification, and the access gateway transfers the user identification to an authorization server. After the authorization server verifies the user identity, a verification success message and a service that the user can access or a verification failure message are/is returned to the access gateway according to the verification result. If the verification is passed, the access gateway allows the user to access the corresponding accessible service.
It can be seen from the above process that, if the authorization server as a centralized server is hacked, or is actively tampered by an entity providing the authorization server, the legitimate rights and benefits of the interested parties will be infringed. From this, it can be seen that, the existing authorization technology has the problem of low safety.
SUMMARY OF THE INVENTION
The present disclosure aims at providing a registration and authorization method, device and system for solving the technical problem of relatively low safety of the existing authorization technology.
In order to achieve the above object, a first aspect of the present invention provides a registration method, the method is applied to an authorization server which is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, each block is used for storing authorization information, and the method includes:
receiving a registration request message sent by a user device, wherein the registration request message includes identification information, and the identification information is used for performing identity verification on a user;
assigning authorization information to the user, wherein the authorization information is used to indicate a service that the user can access; and
writing the identification information and the authorization information into the blocks of the blockchain through the authorization server.
A second aspect of the present invention provides an authorization method, the method is applied to an access server which is a node in a blockchain network, and the method includes:
receiving an access request message sent by a user device, wherein the access request message includes user identity information;
inquiring identification information and authorization information of the user according to the user identity information through the access server;
performing identity verification on the user according to the identification information; and
allowing the user to access the designated service according to the authorization information after the verification is passed.
A third aspect of the present invention provides a registration device, the registration device is applied to an authorization server which is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, each block is used for storing authorization information, and the registration device comprises:
a message receiving unit for receiving a registration request message sent by a user device, wherein the registration request message includes identification information, and the identification information is used for performing identity verification on a user;
an authority assigning unit for assigning authorization information to the user, wherein the authorization information is used to indicate a service that the user can access; and
a blockchain writing unit for writing the identification information and the authorization information into the blocks of the blockchain through the authorization server.
A fourth aspect of the present invention provides an authorization device, the authorization device is used for an access server which is a node in a blockchain network, and the authorization device comprises:
a message receiving unit for receiving an access request message sent by a user device, wherein the access request message includes user identity information;
a blockchain inquiring unit for inquiring identification information and authorization information of the user in a blockchain according to the user identity information through the access server;
an identity verification unit for performing identity verification on the user according to the identification information; and
an access authorizing unit for allowing the user to access the designated service according to the authorization information after the verification of the user by the identity verification unit is passed.
A fifth aspect of the present invention provides an authorization server which is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, each block is used for storing authorization information, and the authorization server comprises:
a processor, a communication interface, a memory and a communication bus; the processor, the communication interface and the memory communicate with each other through the communication bus;
the memory is used for storing application programs;
the processor is used for performing the application program to implement the method of the first aspect.
A sixth aspect of the present invention provides an access server, the access server is a node in a blockchain network, and the access server comprises:
a processor, a communication interface, a memory and a communication bus; the processor, the communication interface and the memory communicate with each other through the communication bus;
the memory is used for storing application programs;
the processor is used for performing the application program to implement the method of the second aspect.
A seventh aspect of the present invention provides an authorization system, and the system comprises:
an authorization server and an access server, wherein the authorization server is a node in a blockchain network, the access server is a node in the blockchain network, and the access server is connected with a server providing network service;
the authorization server is used for performing the method of the first aspect; and
the access server is used for performing the method of the second aspect.
A ninth aspect of the present invention provides a computer readable storage medium, the computer readable medium is used for storing a computer program, wherein the computer program comprises instructions for performing the method of the first aspect.
A tenth aspect of the present invention provides a computer readable storage medium, the computer readable medium is used for storing a computer program, wherein the computer program comprises instructions for performing the method of the second aspect.
By adopting the above technical solutions, the authorization server writes the identity information and the authorization information of the user into the blockchain. In this way, when the access server receives the access request message sent by the user device, the identification information stored in the blockchain may be used to perform the identity verification, and after the verification is passed, the user is allowed to access the designated service according to the authorization information. The detrusting of the blockchain enables the authorization process to require no endorsement by a trusted third party. At the same time, the decentralization of the blockchain makes it impossible for any individual or entity to tamper with the relevant information of the user, thus ensuring the safety and reliability of the authorization.
BRIEF DESCRIPTION OF THE DRAWINGS
In order to illustrate the embodiments of the present invention or the technical solutions in the prior art more clearly, the drawings which need to be used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are about some embodiments of the present invention. For those of ordinary skill in the art, other drawings may also be obtained according to these drawings without creative labor.
FIG. 1 is a schematic flowchart of a registration method provided by an embodiment of the present invention;
FIG. 2 is a schematic flowchart of an authorization method provided by an embodiment of the present invention;
FIG. 3 is a schematic flowchart of a registration and authorization method provided by an embodiment of the present invention;
FIG. 4 is a schematic structural diagram of a registration device provided by an embodiment of the present invention;
FIG. 5 is a schematic structural diagram of an authorization device provided by an embodiment of the present invention;
FIG. 6 is a schematic structural diagram of another authorization server provided by an embodiment of the present invention;
FIG. 7 is a schematic structural diagram of another access server provided by an embodiment of the present invention; and
FIG. 8 is a schematic structural diagram of an authorization system provided by an embodiment of the present invention.
 DETAILED DESCRIPTION OF THE EMBODIMENTS
In order to enable the objects, the technical solutions and the advantages of the embodiments of the present invention to become clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only one part of the embodiments of the present invention rather than all of the embodiments. Based on the embodiments in the present invention, all the other embodiments obtained by those of ordinary skill in the art without creative labor are still within the scope of the claimed present invention.
In order to enable those of skill in the art to understand the technical solutions provided by the embodiments of the present invention more easily, the related technologies involved will be first briefly introduced below.
A blockchain is a decentralized distributed database system in which all nodes in a blockchain network participate in maintenance. It is composed of a series of data blocks generated on the basis of cryptography, and each data block is a block in the blockchain. According to the sequence of generation time, the blocks are linked together orderly to form a data chain, which is vividly called the blockchain. The blockchain generates and verifies the protocol by the special blocks and transactions and has the safety features of unchangeability, unforgeability and full traceability.
The description of the related concepts involved in the blockchain technology is as follows:
User identity: the user identity in a blockchain is represented by a public key, a private key corresponding to the public key is mastered by the user and not issued to a network, the public key becomes an “address” after specific hashing and encoding, and the “address” represents the user and can be issued at will.
Blockchain data writing: the node of the blockchain writes data to the blockchain by issuing a transaction to the blockchain network. The transaction contains a signature of the transaction by the user with his or her private key to verify the identity of the user. The transaction is recorded into a produced new block by a “miner” (a blockchain node performing a consensus competition mechanism of the blockchain) and then issued to the blockchain network, and after the transaction is verified and accepted by other blockchain nodes, transaction data is written into the blockchain.
The blockchain has the following features:
Decentralization: the entire blockchain system has no centralized hardware or management organism. The rights and obligations between any nodes are equal, and the damage or loss of any node will not affect the operation of the entire system. Thus, the blockchain may be considered as having great robustness.
De-trusting: the data exchange between the nodes participating in the entire blockchain system does not require mutual trust. The operating rules of the entire system are public and transparent, and all data contents are also public, so the nodes cannot defraud other nodes within the rule scope and the time range designated by the system.
An embodiment of the present invention provides a registration method based on the blockchain technology, the method is applied to an authorization server, wherein the authorization server is a node in a blockchain network, as shown in FIG. 1, and the method comprises:
S101. Receiving a registration request message sent by a user device, wherein the registration request message includes identification information.
Wherein, the identification information is used for performing identity verification on a user.
S102. Assigning authorization information to the user, wherein the authorization information is used to indicate a service that the user can access.
It is worth noting that an authorization server may assign authorization information to the user according to pre-configured authorization rules, so as to control the server that the user can access. For example, in the specific implementation process, the authorization server may design reasonable network access authorities for the users with different identities, different access places, different access ways and different safe states, which are not limited by the present invention.
S103. Writing the identification information and the authorization information into the blocks of the blockchain through the authorization server.
By referring to the above description of writing of data of the blockchain, wherein the authorization server is a blockchain node in the blockchain network to ensure that the authorization server at least has the function of participating in blockchain transactions. As the node in the blockchain network, the authorization server stores the blockchain composed of a plurality of blocks, and each block is used for storing authorization information. It is worth noting that the authorization server may not participate in mining. In this case, in the above step S103, the authorization server broadcasts the identification information and the authorization information to other nodes in the blockchain network for being written by other nodes when the nodes generate the blocks. The authorization server may also participate in mining. In this case, the authorization server may write the identification information and the authorization information into the block when it generates the block to obtain block writing authority, and may also broadcast the identification information and the authorization information to other nodes in the blockchain network for being written by other nodes when the nodes generate the blocks.
By adopting the above method, as a node in the blockchain network, an access server may utilize the identification information stored in the blockchain to perform the identity verification on access when it receives an access request message sent by the user device, and after the verification is passed, the user is allowed to access the designated service according to the authorization information. The detrusting of the blockchain achieves that the authorization process needs no endorsement by a trusted third party. At the same time, the decentralization of the blockchain makes it impossible for any individual or entity to tamper with the relevant information of the user, thus ensuring the safety and reliability of the authorization.
Further, an embodiment of the present invention also provides an authorization method, the method is applied to an access server, the access server is a node in a blockchain network, as shown in FIG. 2, and the method comprises:
S201. Receiving an access request message sent by a user device, wherein the access request message includes user identity information.
S202. Inquiring identification information and authorization information of the user in a blockchain according to the user identity information through the access server.
The access server is a blockchain node in the blockchain network to ensure that the access server at least has the function of inquiring the blockchain. In a possible implementation way of an embodiment of the present invention, the access server and the authorization server in the registration method as shown in FIG. 1 may be the same server.
In addition, by referring to the description of the user identity in the blockchain, it is worth noting that there is no one-to-one correspondence between the user identity and the blockchain node. The user may use his/her own private key on anyone blockchain node. In this way, the access server may use the private key to seek any one block in the blockchain to inquire and obtain the identification information and the authorization information of the user. If the access server doesn't find the identification information and the authorization information of the user in the blockchain, an access failure message is returned to the user device.
S203. Performing identity verification on the user according to the identification information.
S204. Allowing the user to access the designated service according to the authorization information after the verification of the user identity information is passed.
In this way, compared with the prior art in which the access server relies on a trusted third party to verify the user after receiving the access request message of the user device, the authorization method provided in the embodiment of the present invention has the advantages that as the blockchain network has no centralized hardware or management organism, the rights and obligations between any nodes are equal, and the damage or loss of any node will not affect the operation of the entire system. Thus, the authorization process is safer and more reliable.
The verification of the user according to the identification information and the user identity information will be described specifically below:
Way 1. In the above step S101, the identification information may be a ciphertext of a password hash value.
In specific implementation, the identification information may be obtained by encrypting a plaintext of the password hash value with a public key of the access server and may also be obtained by encrypting the plaintext of the password hash value with a preset key by adopting a symmetric encryption algorithm, wherein the preset key may be stored and used independently by the authorization server and the access server.
In this way, in the step S203, the user identity information may include a user name and the password hash value, and after the access server receives the user identity information, the ciphertext of the password hash value stored on the blockchain is found by the user name. Further, the plaintext of the password hash value is obtained by decrypting the identification information through its own private key or the preset key, if the plaintext of the password hash value obtained by the decryption is consistent with the password hash value in the user identity information, it is indicated that the user identity verification is passed, and if not, it is indicated that the user identity verification is not passed.
Way 2. In the above step S101, the identification information may be a user public key. In the step S203, the user identity information may be the user public key, and after determining that the user public key and the authorization information are recorded in the blockchain according to the user public key, the access server may send instruction information instructing the user to provide identification to the user device, receive signature information of user private key signature sent by the user device according to the instruction information and perform signature verification on the signature information, if the signature verification succeeds, it is indicated that the user identity verification is passed, and if the signature verification fails, it is indicated that the user identity verification fails.
The above is only an example. In specific implementation, other ways may be adopted to verify the user identity, and this aspect is not limited by the present invention.
In a possible implementation way of an embodiment of the present invention, the registration method as shown in FIG. 1 also includes that: the authorization server receives an update message, the update message is used for updating the authorization information corresponding to the identification information, and the identification information and the updated authorization information are written into the blocks of the blockchain through the authorization server.
That is to say, according to the authorization rules configured by the authorization server, if the user satisfies the condition of changing the authorization information, the authorization server may change the authorization scope of the user according to the control of the management system. Thus, a plurality of blocks storing the identification information and the authorization information of the user may exist in the blockchain. Thus, in the above step S202, if a plurality of blocks storing the identification information and the authorization information of the user are inquired in the blockchain through the access server by utilizing the user identity information, acquiring the identification information and the authorization information of the user from the latest block in the plurality of the blocks to ensure that the access server allows the user to access network services according to the latest authorization information.
In order to enable those of skill in the art to understand the technical solutions provided by the embodiments of the present invention better, the registration and authorization method provided by an embodiment of the present invention will be described in detail as an example, as shown in FIG. 3, and the method comprises:
S301. A user device sends a registration request message to an authorization server, wherein the registration request message includes a user public key.
S302. An authorization server assigns authorization information to a user and writes the user public key and the authorization information into a blockchain.
S303. A user device sends an access request message to an access server, wherein the access request message includes the user public key.
S304. The access server inquires whether the user public key has been written into the blockchain or not in the blockchain according to the user public key.
Further, if it is inquired that the user public key has not been written into the blockchain in the blockchain according to the user public key, the step S305 is performed; and if it is inquired that the user public key has been written into the blockchain in the blockchain according to the user public key, the step S306 and the subsequent steps are performed.
S305. The access server returns an access denied message to the user device.
S306. The access server sends a message for instructing the user to provide identification based on the public key and a private key to the user device.
S307. The user device sends signature information of the user private key signature to the access server.
S308. The access server performs signature verification on the signature information according to the user public key.
Further, if the signature verification fails, the step S305 is performed; and if the signature verification succeeds, the step S309 is performed.
S309. The access server allows the user device to access network services in an authorization range according to the authorization information.
By adopting the method, the detrusting of the blockchain enables the authorization process to require no endorsement by a trusted third party. At the same time, the decentralization of the blockchain makes it impossible for any individual or entity to tamper with the relevant information of the user, thus ensuring the safety and reliability of the authorization.
It is worth noting that the above method is only an example of using the user public key as the identification information, and in specific implementation, the identification information may also be a ciphertext of a password hash value. In addition, for the above method embodiment, for ease of description, the method is expressed as a series of action combinations. However, those skilled in the art should understand that the present invention is not limited by the described order of actions. Secondly, those of skill in the art should also understand that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the present invention.
An embodiment of the present invention further provides a registration device 40, the registration device 40 is applied to an authorization server which is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, each block is used for storing authorization information, and the registration device 40 is used for implementing the registration method as shown in FIG. 1 provided in the above method embodiment, and as shown in FIG. 4, the registration device 40 comprises:
a message receiving unit 401 for receiving a registration request message sent by a user device, wherein the registration request message includes identification information, and the identification information is used for performing identity verification on a user;
an authority assigning unit 402 for assigning authorization information to the user, wherein the authorization information is used to indicate a service that the user can access; and
a blockchain writing unit 403 for writing the identification information and the authorization information into the blocks of the blockchain through the authorization server.
By adopting the above registration device, the authorization server applying the registration device can write the identity information and the authorization information of the user into the blockchain. In this way, when the access server receives the access request message sent by the user device, the identification information stored in the blockchain may be used to perform the identity verification, and after the verification is passed, the user is allowed to access the designated service according to the authorization information. The detrusting of the blockchain achieves that the authorization process needs no endorsement by a trusted third party. At the same time, the decentralization of the blockchain makes it impossible for any individual or entity to tamper with the relevant information of the user, thus ensuring the safety and reliability of the authorization.
It is worth noting that the identification information is a ciphertext of a password hash value; or the identification information is a user public key. Specifically, reference may be made to way 1 and way 2 in the above method embodiment, which will not be repeated herein.
Optionally, the message receiving unit 401 is also used for receiving an update message, the update message is used for updating the authorization information corresponding to the identification information; and the blockchain writing unit 403 is also used for writing the identification information and the updated authorization information into the blocks of the blockchain through the authorization server.
That is to say, according to the authorization rules configured by the authorization server, if the user satisfies the condition of changing the authorization information, the authorization server may change the authorization scope of the user according to the control of the management system. Thus, a plurality of blocks storing the identification information and the authorization information of the user may exist in the blockchain.
Those skilled in the art may clearly know that, for convenience and brevity of the description, the above division of the various functional units is only used as an example for description. In actual applications, the above function assignment may be completed by different functional units as needed, namely the internal structure of the device may be divided into different functional units to achieve all or part of the functions described above. For the above specific working process describing the functional units, reference may be made to the corresponding process in the above-mentioned method embodiment, and the details will not be repeated herein.
In addition, there may be a variety of ways for physical implementation of the above functional units. For example, in an exemplary embodiment, the registration device 40 may be implemented by one or more ASICs (Application Specific Integrated Circuits), DSPs (Digital Signal Processors), DSPDs (Digital Signal Processing Devices), PLDs (Programmable Logic Devices), FPGAs (Field Programmable Gate Arrays), controllers, micro-controllers, microprocessors or other electronic elements, so as to perform the method provided by FIG. 1.
An embodiment of the present invention further provides an authorization device 50, the authorization device 50 is applied to an access server, the access server is a node in a blockchain network, the authorization device 50 is used for implementing the authorization method as shown in FIG. 2 provided by the above method embodiment, and as shown in FIG. 5, the authorization device 50 comprises:
a message receiving unit 501 for receiving an access request message sent by a user device, wherein the access request message includes user identity information;
a blockchain inquiring unit 502 for inquiring identification information and authorization information of the user in a blockchain according to the user identity information through the access server;
an identity verification unit 503 for performing identity verification on the user according to the identification information; and
an access authorizing unit 504 for allowing the user to access the designated service according to the authorization information after the verification of the user by the identity verification unit is passed.
The detrusting of the blockchain enables the authorization process to require no endorsement by a trusted third party. At the same time, the decentralization of the blockchain makes it impossible for any individual or entity to tamper with the relevant information of the user, thus ensuring the safety and reliability of the authorization.
Optionally, the blockchain inquiring unit 502 is used for:
when a plurality of blocks storing the identification information and the authorization information of the user are inquired in the blockchain according to the user identity information, acquiring the identification information and the authorization information of the user from the latest block in the plurality of the blocks.
Optionally, the identification information is a ciphertext of a password hash value, and the user identity information includes a user name and the password hash value. The blockchain inquiring unit 502 is used for: seeking the corresponding ciphertext of the password hash value and the authorization information on the blockchain through the access server by utilizing the user name; and the identity verification unit 503 is used for: decrypting the ciphertext of the password hash value and determining that the verification is passed if a plaintext obtained by decryption is consistent with the password hash value in the user identity information.
Optionally, the identification information is a user public key. The identity verification unit 503 is used for: sending instruction information instructing the user to provide identification to the user device; receiving signature information of user private key signature sent by the user device according to the instruction information; and performing signature verification on the signature information according to the user public key, and if the signature verification succeeds, determining that the identity verification is passed.
In specific implementation, the access server may be positioned at the boundary of a network which needs to be accessed by the user device, and the network may be Internet or a local area network. After the user device passes verification, the user device can access the network and access all services of the network. The network services may also be provided by a cloud server, and after the user device passes the identity verification, the user device may access the corresponding service in the authorization range.
It should be clearly understood by those skilled in the art that, for convenience and brevity of the description, for the specific working process of each unit of the access server described above, reference may be made to the corresponding process in the above-mentioned method embodiment, and the details will not be repeated herein.
In addition, the above division of the modules composing the access server is only one logical function division, and other division ways may also be adopted in actual implementation. Furthermore, the physical implementation of the various units may also adopt a variety of ways, which is not limited by the present invention.
An embodiment of the present invention further provides an authorization server 60, the authorization server 60 is a node in a blockchain network, and as shown in FIG. 6, the authorization server 60 comprises:
a processor 601, a communication interface 602, a memory 603 and a communication bus 604; and the processor 601, the communication interface 602 and the memory 603 communicate with each other through the communication bus 604.
The processor 601 may be a multi-core central processing unit (CPU) or an ASIC (Application Specific Integrated Circuit) or one or more integrated circuits configured to implement the embodiment of the present invention.
The memory 603 is used for storing program codes, and the program codes include computer operating instructions and a network flow diagram. The memory 603 may carry a high-speed RAM memory and may also include a non-volatile memory, such as at least one magnetic disk storage.
The communication interface 602 is used for implementing the connection and communication between these devices.
The processor 601 performs the program codes, and the program codes are used for implementing the following method during operation:
receiving a registration request message sent by a user device, wherein the registration request message includes identification information, and the identification information is used for performing identity verification on a user;
assigning authorization information to the user, wherein the authorization information is used to indicate a service that the user can access; and
writing the identification information and the authorization information into the blocks of the blockchain.
Optionally, the identification information is a ciphertext of a password hash value; or the identification information is a user public key.
Optionally, the method further comprises:
receiving an update message, wherein the update message is used for updating the authorization information corresponding to the identification information; and
writing the identification information and the updated authorization information into the blocks of the blockchain.
By adopting the above authorization server, the authorization server writes the identity information and the authorization information of the user into the blockchain. In this way, when the access server receives the access request message sent by the user device, the identification information stored in the blockchain may be used to perform the identity verification, and after the verification is passed, the user is allowed to access the designated service according to the authorization information. The detrusting of the blockchain achieves that the authorization process needs no endorsement by a trusted third party. At the same time, the decentralization of the blockchain makes it impossible for any individual or entity to tamper with the relevant information of the user, thus ensuring the safety and reliability of the authorization.
An embodiment of the present invention further provides an access server 70, the access server 70 is a node in a blockchain network, and as shown in FIG. 7, the access server 70 comprises:
a processor 701, a communication interface 702, a memory 703 and a communication bus 704, wherein the processor 701, the communication interface 702 and the memory 703 communicate with each other through the communication bus 704.
The processor 701 may be a multi-core central processing unit (CPU) or an ASIC (Application Specific Integrated Circuit) or one or more integrated circuits configured to implement the embodiment of the present invention.
The memory 703 is used for, storing program codes, and the program codes include computer operating instructions and a network flow diagram. The memory 703 may carry a high-speed RAM memory and may also include a non-volatile memory, such as at least one magnetic disk storage.
The communication interface 702 is used for implementing the connection and communication between these devices.
The processor 701 performs the program codes, and the program codes are used for implementing the following method during operation:
receiving an access request message sent by a user device, wherein the access request message includes user identity information;
inquiring identification information and authorization information of the user in a blockchain according to the user identity information;
performing identity verification on the user according to the identification information; and
allowing the user to access the designated service according to the authorization information after the verification is passed.
Optionally, inquiring the identification information and the authorization information of the user in the blockchain according to the user identity information comprises:
when a plurality of blocks storing the identification information and the authorization information are found after inquiry in the blockchain according to the user identity information, acquiring the identification information and the authorization information of the user from the latest block in the plurality of blocks.
Optionally, the identification information is a ciphertext of a password hash value, the user identity information includes a password, and performing the identity verification on the user according to the identification information comprises:
calculating a hash value of the user identity information; and
decrypting the user identity information, and determining that the verification is passed if a plaintext obtained by decryption is consistent with the user identity information.
Optionally, the identification information is a user public key, and performing the identity verification on the user according to the identification information comprises:
sending instruction information instructing the user to provide identification to the user device;
receiving user signature information sent by the user device according to the instruction information; and
performing signature verification on the signature information according to the user public key, and determining that the identity verification is passed if the signature verification succeeds.
An embodiment of the present invention further provides an authorization system 80, the authorization system 80 comprises an authorization server 60 and an access server 70, wherein the authorization server 60 is a node in a blockchain network, the access server 70 is a node in the blockchain network, and the access server 50 is connected with a server providing network services. Specifically, for the authorization server 60, reference may be made to the description of FIG. 6, which will not be repeated herein. Specifically, for the access server 70, reference may be made to the description of FIG. 7, which will not be repeated herein.
In several embodiments provided by the application, it should be understood that, the disclosed system, device and method may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logic functional division, and there may be additional division ways in actual implementation. For example, a plurality of units or components may be combined or may be integrated to another system, or some features may be omitted or may not be performed. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical, mechanical or other forms.
The units illustrated as separate parts may or may not be physically separated. The parts displayed as units may or may not be physical units, namely may be positioned at one place, or may be distributed on a plurality of network units. The object of the scheme of the embodiment may be achieved by selecting part or all of the units according to actual needs.
In addition, the various functional units in the various embodiments of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The units integrated above may be implemented not only in a hardware form, but also in a form of hardware and software functional units.
The above integration unit implemented in the form of software functional units may be stored in a computer readable storage medium. The above software functional units are stored in a storage medium, including a number of instructions for enabling a computer device (which may be a personal computer, a server, or a network device, etc.) to perform some of the steps of the methods described in the various embodiments of the present invention. The above-mentioned storage media include: USB disks, mobile hard disks, random access memories (RAM), magnetic disks or compact disks and other media capable of storing data.
The above is only the detailed description of the present invention, but the protection scope of the present invention is not limited thereto. Changes or substitutions which can be easily conceived by those of skill in the art in the technical scope disclosed by the present invention should fall within the protection scope of the present invention. Therefore, the protection scope of the present invention is defined by the claims.

Claims (17)

The invention claimed is:
1. A registration method applied to an authorization server which is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, wherein each block is used for storing authorization information, the method comprising:
receiving a registration request message sent by a user device, wherein the registration request message includes identification information, and the identification information is used for performing identity verification on a user;
assigning authorization information to the user, wherein the authorization information is used to indicate a service that the user can access; and
writing the identification information and the authorization information into the blocks of the blockchain through the authorization server.
2. The method according to claim 1, wherein the identification information is a ciphertext of a password hash value; or the identification information is a user public key.
3. The method according to claim 1, further:
receiving an update message, wherein the update message is used for updating the authorization information corresponding to the identification information; and
writing the identification information and the updated authorization information into the blocks of the blockchain through the authorization server.
4. An authorization method applied to an access server which is a node in a blockchain network, the method comprising:
receiving an access request message sent by a user device, wherein the access request message includes user identity information;
inquiring identification information and authorization information of the user in the blockchain according to the user identity information through the access server;
performing identity verification on the user according to the identification information; and
allowing the user to access the designated service according to the authorization information after the verification is passed,
wherein the identification information is a user public key, and performing identity verification on the user according to the identification information comprises:
sending instruction information instructing the user to provide identification to the user device;
receiving signature information of the user private key signature sent by the user device according to the instruction information; and
performing signature verification on the signature information according to the user public key, and determining that the identity verification is passed if the signature verification succeeds.
5. The method according to claim 4, wherein inquiring the identification information and the authorization information of the user in the blockchain according to the user identity information through the access server comprises:
when a plurality of blocks storing the identification information and the authorization information of the user are inquired in the blockchain by the access server by utilizing the user identity information, acquiring the identification information and the authorization information of the user from the latest block in the plurality of the blocks.
6. The method according to claim 4, wherein the identification information is a ciphertext of a password hash value, and the user identity information includes a user name and the password hash value;
inquiring the identification information and the authorization information of the user in the blockchain according to the user identity information through the access server comprises: seeking the corresponding ciphertext of the password hash value and the authorization information on the blockchain through the access server by utilizing the user name;
performing identity verification on the user according to the identification information comprises:
decrypting the ciphertext of the password hash value, and determining that the verification is passed if a plaintext obtained by decryption is consistent with the password hash value in the user identity information.
7. An authorization server, wherein the authorization server is a node in a blockchain network and stores a blockchain composed of a plurality of blocks, each block is used for storing authorization information, and the authorization server comprises:
a processor, a communication interface, a memory and a communication bus; the processor, the communication interface and the memory communicate with each other through the communication bus;
the memory is used for storing application programs;
the processor is used for performing the application program to implement the following method:
receiving a registration request message sent by a user device, wherein the registration request message includes identification information, and the identification information is used for performing identity verification on a user;
assigning authorization information to the user, wherein the authorization information is used to indicate a service that the user can access; and
writing the identification information and the authorization information into the blocks of the blockchain through the authorization server.
8. The authorization server according to claim 7, wherein the identification information is a ciphertext of a password hash value; or the identification information is a user public key.
9. The authorization server according to claim 7, wherein the method implemented by the processor further comprises:
receiving an update message, wherein the update message is used for updating the authorization information corresponding to the identification information; and
writing the identification information and the updated authorization information into the blocks of the blockchain through the authorization server.
10. An access server, wherein the access server is a node in a blockchain network, and the access server comprises:
a processor, a communication interface, a memory and a communication bus; the processor, the communication interface and the memory communicate with each other through the communication bus;
the memory is used for storing application programs;
the processor is used for performing the application program to implement the following method:
receiving an access request message sent by a user device, wherein the access request message includes user identity information;
inquiring identification information and authorization information of the user in the blockchain according to the user identity information through the access server;
performing identity verification on the user according to the identification information; and
allowing the user to access the designated service according to the authorization information after the verification is passed,
wherein the identification information is a user public key, and performing identity verification on the user according to the identification information comprises:
sending instruction information instructing the user to provide identification to the user device;
receiving signature information of the user private key signature sent by the user device according to the instruction information; and
performing signature verification on the signature information according to the user public key, and determining that the identity verification is passed if the signature verification succeeds.
11. The access server according to claim 10, wherein inquiring the identification information and the authorization information of the user in the blockchain according to the user identity information through the access server comprises:
when a plurality of blocks storing the identification information and the authorization information of the user are inquired in the blockchain by the access server by utilizing the user identity information, acquiring the identification information and the authorization information of the user from the latest block in the plurality of the blocks.
12. The access server according to claim 10, wherein the identification information is a ciphertext of a password hash value, and the user identity information includes a user name and the password hash value;
inquiring the identification information and the authorization information of the user in the blockchain according to the user identity information through the access server comprises: seeking the corresponding ciphertext of the password hash value and the authorization information on the blockchain through the access server by utilizing the user name;
performing identity verification on the user according to the identification information comprises:
decrypting the ciphertext of the password hash value, and determining that the verification is passed if a plaintext obtained by decryption is consistent with the password hash value in the user identity information.
13. A non-transitory computer readable storage medium, wherein the non-transitory computer readable medium is used for storing a computer program, wherein the computer program comprises instructions for performing the following method:
receiving a registration request message sent by a user device, wherein the registration request message includes identification information, and the identification information is used for performing identity verification on a user;
assigning authorization information to the user, wherein the authorization information is used to indicate a service that the user can access; and
writing the identification information and the authorization information into the blocks of the blockchain through the authorization server.
14. The non-transitory computer readable storage medium according to claim 13, wherein the computer program further comprises instructions for performing the following method:
receiving an update message, wherein the update message is used for updating the authorization information corresponding to the identification information; and
writing the identification information and the updated authorization information into the blocks of the blockchain through the authorization server.
15. A non-transitory computer readable storage medium, wherein the non-transitory computer readable medium is used for storing a computer program, wherein the computer program comprises instructions for performing the following method:
receiving an access request message sent by a user device, wherein the access request message includes user identity information;
inquiring identification information and authorization information of the user in the blockchain according to the user identity information through the access server;
performing identity verification on the user according to the identification information; and
allowing the user to access the designated service according to the authorization information after the verification is passed,
wherein the identification information is a user public key, and performing identity verification on the user according to the identification information comprises:
sending instruction information instructing the user to provide identification to the user device;
receiving signature information of the user private key signature sent by the user device according to the instruction information; and
performing signature verification on the signature information according to the user public key, and determining that the identity verification is passed if the signature verification succeeds.
16. The non-transitory computer readable storage medium according to claim 15, wherein inquiring the identification information and the authorization information of the user in the blockchain according to the user identity information through the access server comprises:
when a plurality of blocks storing the identification information and the authorization information of the user are inquired in the blockchain by the access server by utilizing the user identity information, acquiring the identification information and the authorization information of the user from the latest block in the plurality of the blocks.
17. The non-transitory computer readable storage medium according to claim 15, wherein the identification information is a ciphertext of a password hash value, and the user identity information includes a user name and the password hash value;
inquiring the identification information and the authorization information of the user in the blockchain according to the user identity information through the access server comprises:
seeking the corresponding ciphertext of the password hash value and the authorization information on the blockchain through the access server by utilizing the user name;
performing identity verification on the user according to the identification information comprises:
decrypting the ciphertext of the password hash value, and determining that the verification is passed if a plaintext obtained by decryption is consistent with the password hash value in the user identity information.
US16/315,391 2016-12-23 2016-12-23 Registration and authorization method device and system Active 2037-03-04 US11115418B2 (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2016/111857 WO2018112946A1 (en) 2016-12-23 2016-12-23 Registration and authorization method, device and system

Publications (2)

Publication Number Publication Date
US20190312877A1 US20190312877A1 (en) 2019-10-10
US11115418B2 true US11115418B2 (en) 2021-09-07

Family

ID=59623844

Family Applications (1)

Application Number Title Priority Date Filing Date
US16/315,391 Active 2037-03-04 US11115418B2 (en) 2016-12-23 2016-12-23 Registration and authorization method device and system

Country Status (5)

Country Link
US (1) US11115418B2 (en)
EP (1) EP3454238B1 (en)
JP (1) JP6547079B1 (en)
CN (1) CN107079036A (en)
WO (1) WO2018112946A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11481509B1 (en) * 2018-07-10 2022-10-25 United Services Automobile Association (Usaa) Device management and security through a distributed ledger system

Families Citing this family (130)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR101862861B1 (en) * 2017-01-11 2018-07-04 주식회사 코인플러그 Method for providing payment gateway service in use of unspent transaction output based protocol and servers using the same
CN107633390B (en) * 2017-08-25 2021-04-20 苏州朗润创新知识产权运营有限公司 Cloud wallet management method and server
US11374754B2 (en) * 2017-09-07 2022-06-28 Visa International Service Association System and method for generating trust tokens
CN109600338B (en) * 2017-09-30 2021-11-19 卓望数码技术（深圳）有限公司 Trusted identity management service method and system
US11699166B2 (en) 2017-10-09 2023-07-11 American Express Travel Related Services Company, Inc. Multi-merchant loyalty point partnership
US11397962B2 (en) 2017-10-09 2022-07-26 American Express Travel Related Services Company, Inc. Loyalty point distributions using a decentralized loyalty ID
US11449887B2 (en) 2017-10-09 2022-09-20 American Express Travel Related Services Company, Inc. Systems and methods for loyalty point distribution
CN108243182B (en) * 2017-10-26 2020-08-18 招商银行股份有限公司 Block chain management authorization method, sub-management end, root management end and storage medium
CN110019516B (en) * 2017-11-10 2021-08-20 华为技术有限公司 Information management method, device and system
CN111264045B (en) * 2017-11-10 2023-06-30 华为国际有限公司 Interactive system and method based on heterogeneous identity
CN109784084B (en) * 2017-11-14 2022-03-22 中国电信股份有限公司 Data transaction method, device and system
CN109146392B (en) * 2017-11-27 2021-02-12 新华三技术有限公司 License management method and device
CN108702622A (en) * 2017-11-30 2018-10-23 深圳前海达闼云端智能科技有限公司 Mobile network's access authentication method, device, storage medium and block chain node
WO2019127278A1 (en) * 2017-12-28 2019-07-04 深圳达闼科技控股有限公司 Safe access blockchain method, apparatus, system, storage medium, and electronic device
CN111615818B (en) * 2018-01-16 2021-12-14 华为技术有限公司 Block chain construction method and block chain link points
CN108282480B (en) * 2018-01-29 2021-08-13 龙凯 User authorization multi-party monitoring sharing method and system
CN108289129B (en) * 2018-02-26 2020-10-23 深圳智乾区块链科技有限公司 Block chain ecological environment creating method and system and computer readable storage medium
CN108537498A (en) * 2018-03-15 2018-09-14 上海卓辰信息科技有限公司 Interorganizational project management method, system, equipment and medium based on block chain
CN108537549A (en) * 2018-04-18 2018-09-14 四川众之金科技有限公司 A kind of purview certification method and device
US11102190B2 (en) 2018-04-26 2021-08-24 Radware Ltd. Method and system for blockchain based cyber protection of network entities
US11019059B2 (en) 2018-04-26 2021-05-25 Radware, Ltd Blockchain-based admission processes for protected entities
CN108764966A (en) * 2018-04-28 2018-11-06 深圳市元征科技股份有限公司 Advertisement placement method, block chain node device and relevant device
CN108769186B (en) * 2018-05-28 2021-11-23 中国联合网络通信集团有限公司 Service authority control method and device
CN108769010B (en) * 2018-05-29 2021-08-17 中国联合网络通信集团有限公司 Method and device for node invited registration
CN108684041B (en) * 2018-05-31 2021-06-11 上海邑游网络科技有限公司 System and method for login authentication
CN108764872B (en) * 2018-06-01 2020-07-10 杭州复杂美科技有限公司 Authorized payment method, system, equipment and storage medium
US10505718B1 (en) 2018-06-08 2019-12-10 Cisco Technology, Inc. Systems, devices, and techniques for registering user equipment (UE) in wireless networks using a native blockchain platform
CN108769057B (en) * 2018-06-15 2021-11-02 北京奇虎科技有限公司 Identity recognition method and device based on block chain
CN109243045B (en) * 2018-06-28 2022-04-12 平安科技（深圳）有限公司 Voting method, voting device, computer equipment and computer readable storage medium
CN109040026A (en) * 2018-07-11 2018-12-18 深圳市网心科技有限公司 A kind of authorization method of digital asset, device, equipment and medium
CN109088857B (en) * 2018-07-12 2020-12-25 中国电子科技集团公司第十五研究所 Distributed authorization management method in scene of Internet of things
CN109087214B (en) * 2018-07-23 2019-07-16 江苏恒宝智能系统技术有限公司 A kind of natural gas life payment management system based on block chain
CN109067543B (en) 2018-07-24 2020-04-14 腾讯科技（深圳）有限公司 Digital certificate management method, device, computer equipment and storage medium
CN109173261A (en) * 2018-08-08 2019-01-11 平安科技（深圳）有限公司 Online game asset data amending method, device and electronic equipment
CN110839002B (en) * 2018-08-15 2022-05-17 华为云计算技术有限公司 Cloud account opening, authentication and access method and device
CN108965469B (en) * 2018-08-16 2021-07-30 北京京东尚科信息技术有限公司 Dynamic management method, device, equipment and storage medium for members of block chain network
CN109409893A (en) * 2018-08-20 2019-03-01 杭州复杂美科技有限公司 A kind of belief system and its construction method, equipment and storage medium
JP7131200B2 (en) * 2018-08-23 2022-09-06 沖電気工業株式会社 DATA PROCESSING APPARATUS, DATA PROCESSING PROGRAM, DATA PROCESSING METHOD, AND DATA PROCESSING SYSTEM
US10972274B2 (en) * 2018-08-29 2021-04-06 International Business Machines Corporation Trusted identity solution using blockchain
WO2020050424A1 (en) * 2018-09-03 2020-03-12 주식회사 아이씨엔캐스트 BLOCK CHAIN-BASED SYSTEM AND METHOD FOR MULTIPLE SECURITY AUTHENTICATION BETWEEN MOBILE TERMINAL AND IoT DEVICE
CN109257342B (en) 2018-09-04 2020-05-26 阿里巴巴集团控股有限公司 Block chain cross-chain authentication method, system, server and readable storage medium
CN109033776A (en) * 2018-09-07 2018-12-18 广东工业大学 A kind of personnel management methods, system, equipment and computer readable storage medium
CN109409059A (en) * 2018-09-25 2019-03-01 安徽灵图壹智能科技有限公司 A kind of block chain right management method
CN109067801B (en) * 2018-09-29 2021-09-03 平安科技（深圳）有限公司 Identity authentication method, identity authentication device and computer readable medium
CN109547404B (en) * 2018-10-11 2022-08-19 平安科技（深圳）有限公司 Data acquisition method and server
CN109522698A (en) * 2018-10-11 2019-03-26 平安科技（深圳）有限公司 User authen method and terminal device based on block chain
CN109286632B (en) * 2018-10-25 2021-01-15 中国信息通信研究院 Block chain-based big data authorization and evidence-storing method and system
CN111131345B (en) * 2018-10-30 2022-04-15 伊姆西Ip控股有限责任公司 Distributed node finder in multi-cloud computing environment
CN109559123B (en) * 2018-12-10 2021-10-29 深圳市小绿人网络信息技术有限公司 Hybrid point-to-point network processing method
CN109740320A (en) * 2018-12-14 2019-05-10 深圳壹账通智能科技有限公司 A kind of identity identifying method and terminal device based on block chain
CN110046482A (en) * 2018-12-25 2019-07-23 阿里巴巴集团控股有限公司 Identity verification method and its system
CN109492380B (en) * 2019-01-11 2021-04-02 四川虹微技术有限公司 Equipment authentication method and device and block link point
CN109685534A (en) * 2019-01-22 2019-04-26 江苏哩咕信息科技有限公司 It is a kind of to encrypt anti-tamper Product quality and safety traceability system and method based on block chain
CN109871712B (en) * 2019-01-24 2022-10-14 平安科技（深圳）有限公司 Medical record authority management method and device, readable storage medium and server
CN109800601A (en) * 2019-01-24 2019-05-24 杭州趣链科技有限公司 A kind of internet real-name authentication method based on block chain
CN109714173B (en) * 2019-01-25 2020-09-29 北京邮电大学 Block chain-based Internet of things authentication method and device
CN111506915B (en) * 2019-01-31 2023-05-02 阿里巴巴集团控股有限公司 Authorized access control method, device and system
KR102236341B1 (en) 2019-02-28 2021-04-06 어드밴스드 뉴 테크놀로지스 씨오., 엘티디. System and method for blockchain-based data management
CA3058236C (en) 2019-03-27 2020-08-25 Alibaba Group Holding Limited Retrieving public data for blockchain networks using highly available trusted execution environments
WO2019179542A2 (en) 2019-03-27 2019-09-26 Alibaba Group Holding Limited Improving integrity of communications between blockchain networks and external data sources
CN110999255B (en) 2019-03-29 2021-12-21 创新先进技术有限公司 Method and device for retrieving access data of block chain network
CN109981680B (en) * 2019-04-08 2021-08-24 上海人行道网络信息技术有限公司 Access control implementation method and device, computer equipment and storage medium
US11468158B2 (en) 2019-04-10 2022-10-11 At&T Intellectual Property I, L.P. Authentication for functions as a service
CN110049060A (en) * 2019-04-28 2019-07-23 南京理工大学 Distributed trusted identity based on block chain deposits card method and system
CN110233828B (en) * 2019-05-14 2022-01-04 深圳市科迈爱康科技有限公司 Mobile office method and device based on block chain
CN110166460B (en) * 2019-05-24 2021-12-14 北京思源理想控股集团有限公司 Service account registration method and device, storage medium and electronic device
CN110213264A (en) * 2019-05-30 2019-09-06 全链通有限公司 Auth method, equipment and storage medium based on alliance's block chain
CN110198316A (en) * 2019-05-30 2019-09-03 全链通有限公司 Auth method, equipment and storage medium based on alliance's block chain
CN110213046A (en) * 2019-05-30 2019-09-06 全链通有限公司 Auth method, equipment and storage medium based on alliance's block chain
CN110213263B (en) * 2019-05-30 2021-10-22 全链通有限公司 Identity authentication method, equipment and storage medium based on alliance block chain
CN110225017B (en) * 2019-05-30 2021-09-10 全链通有限公司 Identity authentication method, equipment and storage medium based on alliance block chain
CN112241548A (en) * 2019-07-18 2021-01-19 深圳市云歌人工智能技术有限公司 User authentication and authorization based on block chain and authentication and authorization method
CN110445627B (en) * 2019-08-12 2021-10-26 腾讯科技（深圳）有限公司 Group updating method and device, computer equipment and computer storage medium
CN110516474A (en) * 2019-08-27 2019-11-29 腾讯科技（深圳）有限公司 User information processing method, device, electronic equipment and storage medium in block chain network
CN110888938A (en) * 2019-09-02 2020-03-17 腾讯科技（深圳）有限公司 Student identity information processing method and device based on block chain network
CN110569658A (en) * 2019-09-12 2019-12-13 腾讯科技（深圳）有限公司 User information processing method and device based on block chain network, electronic equipment and storage medium
CN110581860B (en) * 2019-09-19 2022-08-26 腾讯科技（深圳）有限公司 Identity authentication method, device, storage medium and equipment based on block chain
CN110634544A (en) * 2019-09-19 2019-12-31 腾讯科技（深圳）有限公司 Medical record data processing method and device based on block chain, storage medium and equipment
CN110598063B (en) * 2019-09-29 2023-08-11 腾讯科技（深圳）有限公司 Biological identity query method, device and storage medium
CN112733096B (en) * 2019-10-14 2024-02-27 深圳市红砖坊技术有限公司 User registration method, user login method and corresponding device
CN111010372A (en) * 2019-11-20 2020-04-14 国家信息中心 Block chain network identity authentication system, data processing method and gateway equipment
CN110968644A (en) * 2019-11-29 2020-04-07 腾讯科技（深圳）有限公司 Data processing method and equipment
CN111027973A (en) * 2019-12-04 2020-04-17 杭州复杂美科技有限公司 Transfer certificate authorization submitting method, device and storage medium
CN113032490B (en) * 2019-12-05 2022-07-12 腾讯科技（深圳）有限公司 Contract data processing method, related equipment and medium
CN111181944B (en) * 2019-12-24 2022-03-11 达闼机器人有限公司 Communication system, information distribution method, device, medium, and apparatus
CN111159736B (en) * 2019-12-25 2022-03-25 联通(广东)产业互联网有限公司 Application control method and system of block chain
CN111132167B (en) * 2019-12-30 2023-04-14 全链通有限公司 Method for 5G user terminal to access 5G network, user terminal equipment and medium
CN111181730A (en) * 2019-12-31 2020-05-19 航天信息股份有限公司 User identity generation and updating method and device, storage medium and node equipment
CN111371543B (en) * 2020-01-08 2023-03-24 中国科学院重庆绿色智能技术研究院 Internet of things equipment access control method based on double-block chain structure
CN111294352B (en) * 2020-02-03 2022-06-14 国家工业信息安全发展研究中心 Data security authentication method between cloud and edge node
CN111291339B (en) * 2020-02-19 2024-02-06 上海方付通商务服务有限公司 Method, device, equipment and storage medium for processing blockchain data
CN111309811A (en) * 2020-02-24 2020-06-19 北京阿尔山金融科技有限公司 Authorization information processing method and device and electronic equipment
CN111310216B (en) * 2020-02-26 2023-03-24 百度在线网络技术（北京）有限公司 Block chain data processing method and device, electronic equipment and medium
CN111460330A (en) * 2020-03-30 2020-07-28 腾讯科技（深圳）有限公司 Data processing method, device, equipment and storage medium
CN111461733B (en) * 2020-04-03 2023-09-01 银清科技有限公司 Block chain-based account information query method, device and system
CN113554441A (en) * 2020-04-08 2021-10-26 陕西尚品信息科技有限公司 Anti-counterfeiting system and method for cold chain product and RFID reader
US11665159B2 (en) * 2020-04-22 2023-05-30 Kyndryl, Inc. Secure resource access by amalgamated identities and distributed ledger
CN111585985B (en) * 2020-04-24 2022-07-12 广东职业技术学院 Business identity recognition and authentication method and system based on block chain
CN111641651B (en) * 2020-05-29 2022-08-02 南方电网科学研究院有限责任公司 Access verification method and device based on Hash chain
CN111786994B (en) * 2020-06-30 2021-09-14 腾讯科技（深圳）有限公司 Data processing method based on block chain and related equipment
CN111539813B (en) * 2020-07-10 2020-12-11 支付宝(杭州)信息技术有限公司 Method, device, equipment and system for backtracking processing of business behaviors
CN111859348B (en) * 2020-07-31 2022-07-19 上海微位网络科技有限公司 Identity authentication method and device based on user identification module and block chain technology
CN111988313B (en) * 2020-08-19 2023-04-07 中国工商银行股份有限公司 Data processing method, device, system and medium for block chain
CN112069517B (en) * 2020-08-25 2023-07-04 建信金融科技有限责任公司 Method and device for managing user rights
CN111814195B (en) * 2020-09-04 2021-05-25 支付宝(杭州)信息技术有限公司 Data management method, device and equipment based on trusted hardware
CN114244546B (en) * 2020-09-09 2023-06-02 华为技术有限公司 Method and device for service provider to acquire user information
CN112187826A (en) * 2020-10-14 2021-01-05 深圳壹账通智能科技有限公司 Data authorization and data access method and system in block chain network
CN112188494B (en) * 2020-10-22 2023-06-27 中国联合网络通信集团有限公司 Terminal access method and device based on block chain network and micro base station
CN112468438B (en) * 2020-10-23 2022-12-27 苏州浪潮智能科技有限公司 Authorization method, device, equipment and readable medium for block chain storage node
CN112528321A (en) * 2020-12-09 2021-03-19 苏州市星际云通区块链科技有限公司 Block chain service device, block chain service system and communication method
CN112580010B (en) * 2020-12-23 2024-01-30 四川虹微技术有限公司 Biological feature sharing method and device, electronic equipment and storage medium
CN112685721A (en) * 2020-12-23 2021-04-20 深圳供电局有限公司 Electric energy meter authority authentication method and device, computer equipment and storage medium
CN112822162B (en) * 2020-12-29 2023-05-23 重庆川仪自动化股份有限公司 Equipment verification connection method and system based on block chain
CN112712372B (en) * 2020-12-30 2024-03-01 东软集团股份有限公司 Alliance chain cross-chain system and information calling method
CN112804063B (en) * 2020-12-31 2023-05-12 深信服科技股份有限公司 Cascading method and related device
CN112968863B (en) * 2021-01-17 2022-11-18 迅鳐成都科技有限公司 Distributed authorization management method and device based on R tree and storage medium
CN112765627B (en) * 2021-01-22 2022-02-18 重庆允成互联网科技有限公司 Business report data authority control method based on double-layer authority control
CN112995413B (en) * 2021-02-08 2023-02-24 中国联合网络通信集团有限公司 Number information tracing method and device and server
CN113194082B (en) * 2021-04-26 2022-12-02 中国联合网络通信集团有限公司 Identity verification method based on block chain, block chain platform and operator platform
CN113569209A (en) * 2021-07-09 2021-10-29 远光软件股份有限公司 User registration method and device based on block chain
CN113779547A (en) * 2021-09-17 2021-12-10 北京安天网络安全技术有限公司 Management method and device of mobile storage equipment and electronic equipment
CN113992381A (en) * 2021-10-22 2022-01-28 北京天融信网络安全技术有限公司 Authorization method, device, authorization platform and storage medium
CN113810136B (en) * 2021-11-17 2022-03-15 南京航空航天大学 Alliance chain-based crowd-sourcing spectrum sensing method and system
CN114205357A (en) * 2021-12-15 2022-03-18 杭州橙鹰数据技术有限公司 Data processing method and device based on block chain
CN114760065B (en) * 2022-03-24 2024-03-19 北京邮电大学 Access control method and device for online learning platform teaching resource sharing
CN114844686B (en) * 2022-04-14 2023-05-26 重庆长安汽车股份有限公司 Authorization system and authorization method based on local area network service bus
CN114866615A (en) * 2022-05-24 2022-08-05 深圳点宽网络科技有限公司 Service calling method, device and system based on block chain and electronic equipment
CN114826780B (en) * 2022-06-24 2022-09-20 中铱数字科技有限公司 Block chain based multi-level authority management system and method
CN115277168B (en) * 2022-07-25 2023-05-26 绿盟科技集团股份有限公司 Method, device and system for accessing server
CN115334149A (en) * 2022-08-15 2022-11-11 杭州复杂美科技有限公司 Block chain information subscription pushing method, equipment and storage medium

Citations (27)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101350710A (en) 2007-07-16 2009-01-21 华为技术有限公司 Network system, authority issuing server, authority issuing and executing method
US20090089866A1 (en) * 2007-09-27 2009-04-02 Akifumi Yato Access authorization system, access control server, and business process execution system
EP1943856B1 (en) 2005-11-04 2010-03-31 Siemens Aktiengesellschaft Method and server for providing a mobile key
US20120110646A1 (en) * 2010-10-29 2012-05-03 Kabushiki Kaisha Toshiba Access authorizing apparatus
CN103841557A (en) 2012-11-20 2014-06-04 中兴通讯股份有限公司 Ubiquitous terminal unified management and control method and platform
US20140270401A1 (en) * 2013-03-15 2014-09-18 United States Postal Service System and method of identity verification
CN105262751A (en) 2015-10-27 2016-01-20 上海斐讯数据通信技术有限公司 Safety login method and device
CN105391696A (en) 2015-10-20 2016-03-09 山东泰信电子股份有限公司 Terminal registration method, terminal verification method, terminal registration system and terminal verification system
WO2016090095A1 (en) 2014-12-05 2016-06-09 Skuchain, Inc. Cryptographic verification of provenance in a supply chain
CN105701372A (en) 2015-12-18 2016-06-22 布比（北京）网络技术有限公司 Block chain identity construction and verification method
US20160328713A1 (en) * 2015-05-05 2016-11-10 ShoCard, Inc. Identity Management Service Using A Blockchain Providing Identity Transactions Between Devices
US9514293B1 (en) 2012-03-20 2016-12-06 United Services Automobile Association Behavioral profiling method and system to authenticate a user
US20170116693A1 (en) * 2015-10-27 2017-04-27 Verimatrix, Inc. Systems and Methods for Decentralizing Commerce and Rights Management for Digital Assets Using a Blockchain Rights Ledger
US20170177855A1 (en) * 2015-12-22 2017-06-22 Thomson Reuters Global Resources Methods and systems for identity creation, verification and management
US9813400B2 (en) * 2014-11-07 2017-11-07 Probaris Technologies, Inc. Computer-implemented systems and methods of device based, internet-centric, authentication
US20180091524A1 (en) * 2016-09-29 2018-03-29 Microsoft Technology Licensing, Llc. Verifiable outsourced ledgers
JP2018055203A (en) 2016-09-26 2018-04-05 Ｇｍｏインターネット株式会社 Data management system, information processing device, program, data management method, and data structure
US20190124070A1 (en) * 2017-10-19 2019-04-25 T-Mobile Usa, Inc. Authentication token with client key
US20190173854A1 (en) * 2017-11-22 2019-06-06 Michael Beck Decentralized information sharing network
US20190219391A1 (en) * 2016-10-05 2019-07-18 The Toronto-Dominion Bank Certificate authority master key tracking on distributed ledger
US20190253251A1 (en) * 2018-02-09 2019-08-15 Canon Kabushiki Kaisha Information processing system and control method therefor
US20190334884A1 (en) * 2014-11-07 2019-10-31 Privakey, Inc. Systems and methods of device based customer authentication and authorization
US20190342085A1 (en) * 2018-05-02 2019-11-07 Green Light Solutions Corp. System and method for tracking product and providing verified product information and consumer rewards
US10581615B2 (en) * 2016-09-18 2020-03-03 Cloudminds (Shenxhen) Robotics) Systems Co., Ltd. Blockchain-based identity authentication method, device, node and system
US20200128024A1 (en) * 2018-10-19 2020-04-23 Netapp, Inc. Methods for securely facilitating data protection workflows and devices thereof
US20200226285A1 (en) * 2016-08-23 2020-07-16 BBM Health LLC Blockchain-based mechanisms for secure health information resource exchange
US20200244470A1 (en) * 2017-03-17 2020-07-30 Bundersdruckerei Gmbh Issuing virtual documents in a block chain

Patent Citations (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1943856B1 (en) 2005-11-04 2010-03-31 Siemens Aktiengesellschaft Method and server for providing a mobile key
CN101350710A (en) 2007-07-16 2009-01-21 华为技术有限公司 Network system, authority issuing server, authority issuing and executing method
US20090089866A1 (en) * 2007-09-27 2009-04-02 Akifumi Yato Access authorization system, access control server, and business process execution system
US20120110646A1 (en) * 2010-10-29 2012-05-03 Kabushiki Kaisha Toshiba Access authorizing apparatus
US9514293B1 (en) 2012-03-20 2016-12-06 United Services Automobile Association Behavioral profiling method and system to authenticate a user
CN103841557A (en) 2012-11-20 2014-06-04 中兴通讯股份有限公司 Ubiquitous terminal unified management and control method and platform
CN105264487A (en) 2013-03-15 2016-01-20 美国邮政管理局 System and method of identity verification
US20140270401A1 (en) * 2013-03-15 2014-09-18 United States Postal Service System and method of identity verification
US20190334884A1 (en) * 2014-11-07 2019-10-31 Privakey, Inc. Systems and methods of device based customer authentication and authorization
US9813400B2 (en) * 2014-11-07 2017-11-07 Probaris Technologies, Inc. Computer-implemented systems and methods of device based, internet-centric, authentication
WO2016090095A1 (en) 2014-12-05 2016-06-09 Skuchain, Inc. Cryptographic verification of provenance in a supply chain
US20160328713A1 (en) * 2015-05-05 2016-11-10 ShoCard, Inc. Identity Management Service Using A Blockchain Providing Identity Transactions Between Devices
CN105391696A (en) 2015-10-20 2016-03-09 山东泰信电子股份有限公司 Terminal registration method, terminal verification method, terminal registration system and terminal verification system
CN105262751A (en) 2015-10-27 2016-01-20 上海斐讯数据通信技术有限公司 Safety login method and device
US20170116693A1 (en) * 2015-10-27 2017-04-27 Verimatrix, Inc. Systems and Methods for Decentralizing Commerce and Rights Management for Digital Assets Using a Blockchain Rights Ledger
CN105701372A (en) 2015-12-18 2016-06-22 布比（北京）网络技术有限公司 Block chain identity construction and verification method
US20170177855A1 (en) * 2015-12-22 2017-06-22 Thomson Reuters Global Resources Methods and systems for identity creation, verification and management
US20200226285A1 (en) * 2016-08-23 2020-07-16 BBM Health LLC Blockchain-based mechanisms for secure health information resource exchange
US10581615B2 (en) * 2016-09-18 2020-03-03 Cloudminds (Shenxhen) Robotics) Systems Co., Ltd. Blockchain-based identity authentication method, device, node and system
JP2018055203A (en) 2016-09-26 2018-04-05 Ｇｍｏインターネット株式会社 Data management system, information processing device, program, data management method, and data structure
US20180091524A1 (en) * 2016-09-29 2018-03-29 Microsoft Technology Licensing, Llc. Verifiable outsourced ledgers
US20190219391A1 (en) * 2016-10-05 2019-07-18 The Toronto-Dominion Bank Certificate authority master key tracking on distributed ledger
US20200244470A1 (en) * 2017-03-17 2020-07-30 Bundersdruckerei Gmbh Issuing virtual documents in a block chain
US20190124070A1 (en) * 2017-10-19 2019-04-25 T-Mobile Usa, Inc. Authentication token with client key
US20190173854A1 (en) * 2017-11-22 2019-06-06 Michael Beck Decentralized information sharing network
US20190253251A1 (en) * 2018-02-09 2019-08-15 Canon Kabushiki Kaisha Information processing system and control method therefor
US20190342085A1 (en) * 2018-05-02 2019-11-07 Green Light Solutions Corp. System and method for tracking product and providing verified product information and consumer rewards
US20200128024A1 (en) * 2018-10-19 2020-04-23 Netapp, Inc. Methods for securely facilitating data protection workflows and devices thereof

Non-Patent Citations (10)

* Cited by examiner, † Cited by third party
Title
Anonymous: "Blockchain ID", Jan. 1, 2015 (Jan. 1, 2015), XP055311310, Retrieved from the internet: URL: https://github.com/Blockstack/blockchain-id/wiki (17 pages).
Chinese Search Report issued in corresponding Chinese Application No. 201680003231.5, dated Sep. 25, 2019 (10 pages).
Decision to Grant in corresponding Japanese Application No. 2018-563628, dated May 24, 2019 (5 pages).
European Search Report in corresponding European Application No. 16924533.9-1218, dated Nov. 28, 2019 (6 pages).
International Search Report and Written Opinion Issued in Corresponding PCT Application No. PCT/CN2016/111857, dated Sep. 28, 2017 (8 Pages with English Translation of International Search Report).
Ivica Aracic: "Ethereum Usecase: Online Identitätsprofung—Blockchainers", Mar. 29, 2016 (Mar. 29, 2016), p. 1-6, XP055424742, Retrieved from the Internet: URL: http://blockchainers.org/index.php/2016/03/29/ethereum-usecase-online-identity-check/ (6 pages).
Muneeb Ali + et al: "Blockstack; A Global Naming and Storage System Secured by Blockchains", USENIX, USENIX, The Advanced Computing Systems Association, Jun. 22, 2016 (Jun. 22, 2016), pp. 188-201, XP061024971, Retrieved from the Internet: URL: https://www.usenix.org/sites/default/files/atc16_full_proceedings_interior.pdf (14 pages).
MUNEEB ALI †, JUDE NELSON †, RYAN SHEA †, MICHAEL J. FREEDMAN PRINCETON UNIVERSITY, †BLOCKSTACK LABS: "Blockstack: A Global Naming and Storage System Secured by Blockchains", USENIX, USENIX, THE ADVANCED COMPUTING SYSTEMS ASSOCIATION, 22 June 2016 (2016-06-22), Usenix, the Advanced Computing Systems Association, pages 188 - 201, XP061024971
Xu et al.; "BlendCAC: A BLockchain-ENabled Decentralized Capability-based Access Control for IoTs", 2018, IEEE, pp. 1027-1034. (Year: 2018). *
Zhou et al.; "Authentication, Authorization, and Accounting for Real-Time Secondary Market Services", 2005 IEEE, pp. 1005-1009. (Year: 2005). *

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11481509B1 (en) * 2018-07-10 2022-10-25 United Services Automobile Association (Usaa) Device management and security through a distributed ledger system

Also Published As

Publication number Publication date
JP2019522412A (en) 2019-08-08
EP3454238B1 (en) 2022-02-09
EP3454238A1 (en) 2019-03-13
EP3454238A4 (en) 2020-01-01
CN107079036A (en) 2017-08-18
WO2018112946A1 (en) 2018-06-28
US20190312877A1 (en) 2019-10-10
JP6547079B1 (en) 2019-07-17

Similar Documents

Publication Publication Date Title
US11115418B2 (en) Registration and authorization method device and system
Lim et al. Blockchain technology the identity management and authentication service disruptor: a survey
EP3486817B1 (en) Blockchain-based identity authentication methods, computer program products and nodes
US20220191012A1 (en) Methods For Splitting and Recovering Key, Program Product, Storage Medium, and System
CN107770115B (en) Method and system for distributing digital content in a peer-to-peer network
US8997198B1 (en) Techniques for securing a centralized metadata distributed filesystem
CN112131316B (en) Data processing method and device applied to block chain system
JP2021526341A (en) Digital certificate management methods, devices, computer devices and computer programs
CN104980477A (en) Data access control method and system in cloud storage environment
CN110177124B (en) Identity authentication method based on block chain and related equipment
CN112671720B (en) Token construction method, device and equipment for cloud platform resource access control
CN110264200A (en) Block chain data processing method and device
CN110599342B (en) Block chain-based identity information authorization method and device
US11121876B2 (en) Distributed access control
CN111131336B (en) Resource access method, device, equipment and storage medium under multi-party authorization scene
CN114239046A (en) Data sharing method
CN111193755B (en) Data access method, data encryption method and data encryption and access system
CN113438205A (en) Block chain data access control method, node and system
CN114666168A (en) Decentralized identity certificate verification method and device, and electronic equipment
CN114168923B (en) Group CA certificate generation method and system based on digital certificate
CN114528601A (en) Access method and device based on block chain data, processor and electronic equipment
CN110910110A (en) Data processing method and device and computer storage medium
CN114826702A (en) Database access password encryption method and device and computer equipment
CN113282950B (en) Operation and maintenance method, device, equipment and system of encryption machine
CN110276693B (en) Insurance claim settlement method and system

Legal Events

Date Code Title Description
FEPP Fee payment procedure

Free format text: ENTITY STATUS SET TO UNDISCOUNTED (ORIGINAL EVENT CODE: BIG.); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

AS Assignment

Owner name: CLOUDMINDS (SHENZHEN) ROBOTICS SYSTEMS CO., LTD., CHINA

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:XIE, HUI;WANG, JIAN;SIGNING DATES FROM 20180322 TO 20180416;REEL/FRAME:051020/0694

Owner name: CLOUDMINDS (SHENZHEN) ROBOTICS SYSTEMS CO., LTD.,

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:XIE, HUI;WANG, JIAN;SIGNING DATES FROM 20180322 TO 20180416;REEL/FRAME:051020/0694

STPP Information on status: patent application and granting procedure in general

Free format text: NON FINAL ACTION MAILED

AS Assignment

Owner name: CLOUDMINDS (SHANGHAI) ROBOTICS CO., LTD., CHINA

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:CLOUDMINDS (SHENZHEN) ROBOTICS SYSTEMS CO., LTD.;REEL/FRAME:055472/0068

Effective date: 20210224

STPP Information on status: patent application and granting procedure in general

Free format text: RESPONSE TO NON-FINAL OFFICE ACTION ENTERED AND FORWARDED TO EXAMINER

STPP Information on status: patent application and granting procedure in general

Free format text: NOTICE OF ALLOWANCE MAILED -- APPLICATION RECEIVED IN OFFICE OF PUBLICATIONS

STPP Information on status: patent application and granting procedure in general

Free format text: PUBLICATIONS -- ISSUE FEE PAYMENT VERIFIED

STCF Information on status: patent grant

Free format text: PATENTED CASE

AS Assignment

Owner name: CLOUDMINDS ROBOTICS CO., LTD., CHINA

Free format text: CORRECTIVE ASSIGNMENT TO CORRECT THE ASSIGNEE NAME PREVIOUSLY RECORDED AT REEL: 055472 FRAME: 0068. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT;ASSIGNOR:CLOUDMINDS (SHENZHEN) ROBOTICS SYSTEMS CO., LTD.;REEL/FRAME:059612/0751

Effective date: 20210224

AS Assignment

Owner name: CLOUDMINDS ROBOTICS CO., LTD., CHINA

Free format text: CHANGE OF ADDRESS;ASSIGNOR:CLOUDMINDS ROBOTICS CO., LTD.;REEL/FRAME:059911/0490

Effective date: 20220506